IN THE CLAIMS: 



1 . (Original) An apparatus for processing a security setup control message in a 
mobile communication system, the apparatus comprising: 

means for verifying the integrity of the message wherein the value of at least one security 
variable is updated with new security setup information if the message is verified and the value 
of the security variable remains unchanged if the message is not verified. 

2. (Original) The apparatus of claim 1, further comprising means for storing the 
previous value of the security variable before it is updated with new security setup information. 

3. (Original) The apparatus of claim 2, wherein the means for storing the previous 
value of the security variable comprises a memory unit. 

4. (Original) The apparatus of claim 2, wherein the means for storing the previous 
value of the security variable comprises a shift register. 

5. (Original) The apparatus of claim 1, wherein the means for verifying the integrity 
of the message comprises a processor. 

6. (Original) The apparatus of claim 1, wherein the means for verifying the integrity 
of the message comprises software stored on recording media. 

7. (Original) The apparatus of claim 1 , wherein the new security setup information is 
extracted from the message. 

8. (Original) The apparatus of claim 1 , wherein the apparatus is located in UE. 

9. (Original) The apparatus of claim 1, wherein the apparatus is located in the 
UTRAN. 
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1 0. (Original) The apparatus of claim 1, wherein the means for verifying the integrity 
of the message is adapted to generate an authentication value related to the message. 

1 1 . (Original) The apparatus of claim 1 0, wherein the means for verifying the 
integrity of the message comprises a standardized integrity check authentication generation 
algorithm. 

12. (Previously presented) A method for processing a security setup control message 
in a mobile communication system, the method comprising the steps of; 

verifying the integrity of the message; and 

processing the message and updating the value of at least one security variable with new 
security setup information if the message is verified and discarding the message and leaving the 
value of the at least one security variable unchanged if the message is not verified. 

13. (Previously presented) The method of claim 12, further comprising storing the 
previous value of the at least one security variable before it is updated with new security setup 
information. 

14. (Original) The method of claim 12, further comprising extracting the new security 
setup information from the message. 

15. (Original) The method of claim 12, further comprising generating an expected 
authentication value related to the message. 

16. (Original) The method of claim 1 5, further comprising performing a standardized 
integrity check authentication generation algorithm. 

17. (Original) The method of claim 15, further comprising comparing the expected 
authentication value to a received authentication code. 
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18. (Original) The method of claim 1 7, wherein the message is processed if the 
received message authentication code is equal to the expected message authentication value and 
the message is discarded if the received message authentication code is not equal to the expected 
message authentication code. 

19. (Previously presented) The method of claim 12, wherein the message is an RR.C 
(radio resource control) message. 

20. (Previously presented) Hie method of claim 12, wherein the message is a signaling 
message. 

2 1 . (Previously presented) An mobile station for processing a security setup control 
message in a mobile communication system, the mobile station comprising: 

an RF module; 

a power management module; 

an antenna; 

a battery; 

a keypad; 

a memory unit; 

a speaker; 

a microphone; and 

a processing unit adapted to verify the integrity of the message wherein the value of at 
least one security variable is updated with new security setup information if the message is 
verified and the value of the at least one security variable remains unchanged if the message is 
not verified. 

22. (Previously presented) The mobile station of claim 21, wherein the memory unit is 
adapted to store the previous value of the at least one security variable before it is updated with 
new security setup information. 
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23. (Previously presented) The mobile station of claim 22, wherein the memory unit 
comprises a shift register. 

24. (Previously presented) The mobile station of claim 21 , wherein the memory unit 
comprises a flash memory. 

25. (Previously presented) The mobile station of claim 21, wherein the memory unit 
comprises a ROM. 

26. (Previously presented) The mobile station of claim 2 1 , wherein the memory unit 
comprises an SRAM. 

27. (Previously presented) The mobile station of claim 21 , wherein the processing unit 
comprises a microprocessor. 

28. (Previously presented) The mobile station of claim 21 , wherein the processing unit 
comprises software stored on recording media. 

29. (Previously presented) The mobile station of claim 2 1 , wherein the new security 
setup information is extracted from the message. 

30. (Previously presented) The mobile station of claim 21 , wherein the processing unit 
is adapted to generate an authentication value related to the message. 

3 1 . (Previously presented) The mobile station of claim 30, wherein the processing unit 
comprises a standardized integrity check authentication generation algorithm. 

32. (Previously presented) The mobile station of claim 21, further comprising a SIM 

card. 
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